ONTAP Discussions

NDMP backup of vFiler in different AD domain

moncsko
7,250 Views

Hi All,

IHAC who is looking to do NDMP backups of volumes on a vFiler that is in a different AD domain than the physical filer (vfiler0). The challenge has been authenticating to the backup server, which is a member of the same AD domain as the vFiler being backed up. Since NDMP dumps can only be done from the context of vfiler0, the authentication fails. There is no trust relationship between the two AD domains.

Does anyone have any experience in getting this to work, or if not, could suggest a feasible alternative for backing up these volumes? Any input would be greatly appreciated.

Thanks.

Brian Moncsko

1 ACCEPTED SOLUTION

scottgelb
7,250 Views

What account are you authenticating with for NDMP?  You could create a local user account on vfiler0 "useradmin user add ndmpuser -g "backup operators" , set a password, then for the ndmp software to authenticate use the "ndmpuser" user then the output of "ndmpd password ndmpuser".. The ndmp authentication will be separate from the domain with the local user.  You could also authenticate the root account with the root password (no need for ndmpd password for the root user).

View solution in original post

10 REPLIES 10
Public